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III. 



DETAILED ACTION 



1. 



Claims 1-55 are presented for examination. 



Claim Rejections - 35 USC § 103 



2. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which the subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

3. Claims 1-7, 9-18, 22-28, 30-40, 44-49 and 51-55 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kennedy et al . (U.S. Patent 6,651,217) in view of Kawasaki (U.S. 
Patent 6, 539, 375) . 

As to Claim 1, Kennedy et al . discloses a method of 
managing meta data in a computing device, the method comprising 
the steps of: 

collecting meta data resulting from use of the computing 
device, the metadata including application data usable in an 
application (storing into a profile data values entered on a 
form on the basis of labels associated with fields on the 



form) (col. 3, lines 1-5) and a context data for identifying 



Application/Control Number: 10/051,558 Page 3 

Art Unit: 2175 

context in which the application data are used (col. 5, lines 
43-53) . 

storing the meta data and the statistical information in a 
storage of the computing device (i.e. the profile, which is 
stored for future use) (see abstract) ; and 

retrieving, from the storage (i.e. a previously stored data 
value is retrieved from the user profile) (col. 11, lines 10-13), 
application data that would be most appropriate for a current 
context of using the application based on the context data (fig. 
5) and the statistical information (col. 5, lines 30-34) and 

Kennedy et al . does not teach determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

Kawasaki teaches determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data (i.e. collecting 
representative data sets of major areas of interests and 
processing the data sets by algorithms and weighted rules to 
form a recognizer) (col. 3, lines 4-16) . 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
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have modified Kennedy et al . wherein the determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al , by the teaching of Kawasaki because 
providing the determining statistical information associated 
with the meta data, the statistical information indicating 
relationships between the meta data allows reduced inaccurate, 
misleading or obsolete preferences, which may causing a mismatch 
between actual User interests and the information captured in 
manual preferences systems as taught by Kawasaki (col. 2, lines 
35-45) . 

As to Claim 2, Kennedy et al . as modified teaches a 
method further comprising the step of: 

applying the retrieved application data in the current 
context ( Kennedy et al . Fig. 2-3 and col. 5, lines 43-53). 



As to Claim 3, Kennedy et al . as modified teaches a 
method wherein 
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the context data identify at least one of the following: 
user roles, uniform resource identifiers (URls) , file names, 
and/or form names pertaining to the application data ( Kennedy et 
al . Fig. 2-3 and col. 5, lines 43-53). 

As to Claim 4, Kennedy et al . as modified teaches a 
method wherein the application data include at least one of the 
following : 

page display setting data, file display setting data, user 
ID/password combinations, field values for computer forms, 
user's preference data, bookmarks, and authentication data (i.e. 
passwords) ( Kennedy et al . Fig. 6 and col. 8, lines 36-45) . 

As to Claim 5, Kennedy et al . as modified teaches a 
method wherein the authentication data include at least one of 
the following: 

certificates, or public keys (i.e. For additional security 
purposes, the values in data store 2 06 could be stored in 
encrypted form in a protected area in client computer) ( Kennedy 
et al . col. 7, lines 47-50). 



As to Claim 6, Kennedy et al . as modified teaches a 
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method wherein the authentication data include at least one of 
the following: 

wherein the metadata are stored in (key, value) pairs. 

(i.e. the values can be correlated or combined with data from 
other sources, such as values used by the profile assistant) 

( Kennedy et al . col. 7, lines 50-55). 

As to Claim 7, Kennedy et al . as modified teaches a 
method wherein 

the statistical information indicates frequencies in which 
particular application data are used together in particular 
contexts (i.e. frequency of encounter ) ( Kawasaki col. 3, lines 
4-16) . 

As to Claim 9, Kennedy et al . as modified teaches a 
method wherein the current context includes at least one of the 
following : 

opening a web page, filling in a computer form, filling in 
a password changing form, providing a certificate, opening a 
computer file, or processing a computer file, or executing an 
application program ( Kennedy et al . Fig. 6 and col. 8, lines 36- 
45) . 
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As to Claim 10, Kennedy et al . as modified teaches a 
method further comprising the step of: 

providing a graphical user interface (GUI) for allowing the 
user to organize the stored meta data ( Kennedy et al . Fig. 6 and 
col . 8 , lines 36-45) . 

As to Claim 11, Kennedy et al . as modified teaches a 
method wherein 

the GUI displays a graphical tool in a cylindrical 
configuration for organizing the stored meta data ( Kennedy et 
al . Fig. 6) . 



As to Claim 12, Kennedy et al. as modified teaches a 
method wherein 

the retrieving step is performed using heuristics 
algorithms (i.e. a heuristics function can also be 
provided) ( Kennedy et al . col. 7, lines 29-35) . 

As to Claim 13, Kennedy et al . as modified teaches a 
method wherein the retrieving step includes the steps of: 

formulating search requirements based on the current 
context of using the application (i.e. search) ( Kennedy et al . 
Fig. 6-7) ; and 
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executing a search based on the search requirements (i.e. 
search) ( Kennedy et al . Fig. 6-7) . 

As to Claim 14, the teachings of Kennedy et al . as modified 
has been discussed above, Kennedy et al . as modified does not 
teach the search requirements specify weighted properties of the 
current context of using the application. 

Kawasaki teaches the search requirements specify weighted 
properties of the current context of using the application (i.e. 
collecting representative data sets of major areas of interests 
and processing the data sets by algorithms and weighted rules to 
form a recognizer) ( Kawasaki col. 3, lines 4-16) 

As to Claim 15, Kennedy et al . as modified teaches a 
method further comprising the steps of: 

applying the retrieved application data in the current 
context (i.e. passwords) ( Kennedy et al . Fig. 6-7 and col. 8, 
lines 3 6-45) ; and 

applying predetermined application data in the current 
context if no such most appropriate application data are 
retrieved in the retrieving step ( Kennedy et al . Fig. 6-7 and 
col. 8, lines 36-45). 



Application/Control Number: 10/051,558 Page 9 

Art Unit: 2175 

As to Claim 16, Kennedy et al . as modified teaches a 
method wherein the current context is for filling in a computer 
form, and the method comprises the step of: 

automatically filling in the computer form with the most 
appropriate application data (i.e. Thus has been described a 
method and apparatus for automatically populating a form 
comprising a plurality of fields) ( Kennedy et al . Fig. 6-7 and 
col. 14, lines 52-55). 

As to Claim 17, Kennedy et al . as modified teaches a 
method further comprising the steps of: 

retrieving, from the storage, alternative application data 
that are related to the current context of filling in the 
computer form (i.e. the user has the option of entering 
information for other fields for which no match was 
found) ( Kennedy et al. Fig. 6-7 and col. 14, lines 34-45); and 

presenting the alternative application data to a user for 
the user's consideration ( Kennedy et al . Fig. 6 and col. 8, 
lines 34-45) . 

As to Claim 18, Kennedy et al . as modified teaches a 
method of claim wherein the computer form is a password- changing 
form, and the retrieved application data include a user 
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identification and a password ( Kennedy et al . Fig. 6 and col. 8, 
lines 34-45) . 



2r2r. A computer program product embodied on computer 
readable medium readable by a computing device, for managing 
meta data in the computing device, the computer program product 
comprising computer executable instructions for: 

collecting meta data resulting from use of the computing 
device, the metadata including application data usable in an 
application (storing into a profile data values entered on a 
form on the basis of labels associated with fields on the 
form) (col. 3, lines 1-5) and a context data for identifying 
context in which the application data are used (col. 5, lines 
43-53) . 

storing the meta data and the statistical information in a 
storage of the computing device (i.e. the profile, which is 
stored for future use) (see abstract) ; and 

retrieving, from the storage (i.e. a previously stored data 
value is retrieved from the user profile) (col. 11, lines 10-13), 
application data that would be most appropriate for a current 
context of using the application based on the context data (fig. 
5) and the statistical information (col. 5, lines 30-34). 




Application/Control Number: 10/051,558 Page 11 

Art Unit: 2175 

Kennedy et al . does not teach determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

Kawasaki teaches determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data (i.e. collecting 
representative data sets of major areas of interests and 
processing the data sets by algorithms and weighted rules to 
form a recognizer) (col. 3, lines 4-16). 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein the determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Kawasaki because 
providing the determining statistical information associated 
with the meta data, the statistical information indicating 
relationships between the meta data allows reduced inaccurate, 
misleading or obsolete preferences, which may causing a mismatch 
between actual User interests and the information captured in 
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manual preferences systems as taught by Kawasaki (col. 2, lines 
35-45) . 



As to Claim 23, Kennedy et al . as modified teaches a 
computer program product further comprising computer executable 
instructions for: 

applying the retrieved application data in the current 
context ( Kennedy et al . Fig. 2-3 and col. 5, lines 43-53) . 

As to Claim 24, Kennedy et al . as modified teaches a 
computer program product wherein 

the context data identify at least one of the following: 
user roles, uniform resource identifiers (URls) , file names, 
and/or form names pertaining to the application data ( Kennedy et 
al . Fig. 2-3 and col. 5, lines 43-53). 

As to Claim 25, Kennedy et al. as modified teaches a 
computer program product wherein 

the application data include at least one of the following: 
page display setting data, file display setting data, user 
ID/password combinations, field values for computer forms, 
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user's preference data, bookmarks, and authentication data (i.e. 
passwords) ( Kennedy et al . Fig. 6 and col. 8, lines 36-45) . 

As to Claim 26, Kennedy et al , as modified teaches a 
computer program product wherein the authentication data include 
at least one of the following: 

certificates, or public keys (i.e. For additional security 
purposes, the values in data store 206 could be stored in 
encrypted form in a protected area in client computer) ( Kennedy 
et al . col. 7, lines 47-50). 

As to Claim 27, Kennedy et al . as modified teaches a 
computer program product wherein 

the meta data are stored in (key, value) pairs (i.e. the 
values can be correlated or combined with data from other 
sources, such as values used by the profile assistant) ( Kennedy 
et al. col. 7, lines 50-55). 

As to Claim 28, Kennedy et al . as modified teaches a 
computer program product wherein 

the statistical information indicates frequencies in which 
particular application data are used together in particular 
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contexts (i.e. frequency of encounter ) ( Kawasaki col. 3, lines 
4-16) . 

As to Claim 30, Kennedy et al . as modified teaches a 
computer program product further comprising computer executable 
instructions for 

updating the computing device with meta data resulting from 
use of the computing device in the current context ( Kennedy et 
al. col. 6, lines 20-24). 



As to Claim 31, Kennedy et al . as modified teaches a 
computer program product wherein the current context includes at 
least one of the following: 

opening a web page, filling in a computer form, filling in 
a password- changing form, providing a certificate, opening a 
computer file, processing a computer file, or executing an 
application program ( Kennedy et al . Fig. 6 and col. 8, lines 36- 
45) . 



As to Claim 32, Kennedy et al . as modified teaches a 
computer program product further comprising computer executable 
instructions for: 
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providing a graphical user interface (GUI ) for allowing the 
user to organize the stored meta data ( Kennedy et al . Fig. 6 and 
col . 8, lines 36-45) . 

As to Claim 33, Kennedy et al . as modified teaches a 
computer program product wherein 

the GUI displays a graphical tool in a cylindrical 
configuration for organizing the stored meta data ( Kennedy et 
al . Fig. 6) . 

As to Claim 34, Kennedy et al . as modified teaches a 
computer program product wherein the computer executable 
instructions for retrieving the most appropriate meta data is 
implemented using heuristics algorithms (i.e. a heuristics 
function can also be provided) ( Kennedy et al . col. 7, lines 29- 
35) . 

As to Claim 35, Kennedy et al . as modified teaches a 
computer program product wherein the computer executable 
instructions for retrieving the most appropriate meta data 
includes computer executable instructions for: 
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formulating search requirements based on the current 
context of using the application (i.e. search) ( Kennedy et al . 
Fig . 6-7) ; and 

executing a search based on the search requirements (i.e. 
search) ( Kennedy et al . Fig. 6-7) . 

As to Claim 36, the teachings of Kennedy et al . as modified 
has been discussed above, Kennedy et al . as modified does not 
teach the search requirements specify weighted properties of the 
current context of using the application. 

Kawasaki teaches the search requirements specify weighted 
properties of the current context of using the application (i.e. 
collecting representative data sets of major areas of interests 
and processing the data sets by algorithms and weighted rules to 
form a recognizer) ( Kawasaki col. 3, lines 4-16) 

As to Claim 37, Kennedy et al . as modified teaches a 
computer program product further comprising computer executable 
instructions for 

applying the retrieved application data in the current 
context ( Kennedy et al . Fig. 6-7 and col. 8, lines 36-45); and 
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applying predetermined application data in the current 
context if no such most appropriate application data are 
retrieved ( Kennedy et al . Fig. 6-7 and col. 8, lines 36-45). 

As to Claim 38, Kennedy et al . as modified teaches a 
computer program product wherein 

the current context is for filling in a computer form, and 
the computer program product comprises computer executable 
instructions for automatically filling in the computer form with 
the most appropriate application data (i.e. Thus has been 
described a method and apparatus for automatically populating a 
form comprising a plurality of fields) ( Kennedy et al . Fig. 6-7 
and col. 14, lines 52-55). 

As to Claim 39, Kennedy et al . as modified teaches a 
computer program product further comprising computer executable 
instructions for: 

retrieving, from the storage, alternative application data 
that are related to the current context of filling in the 
computer form (i.e. the user has the option of entering 
information for other fields for which no match was 
found) ( Kennedy et al . Fig. 6-7 and col. 14, lines 34-45); and 
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presenting the alternative application data to a user for 
the user's consideration ( Kennedy et al ._ Fig. 6 and col. 8, 
lines 34-45) . 

As to Claim 40, Kennedy et al . as modified teaches a 
computer program product wherein 

the computer form is a password- changing form, and the 
retrieved application data include a user identification and a 
password ( Kennedy et al . Fig. 6 and col. 8, lines 34-45). 

As to Claim 44, Kennedy et al . discloses a system for 
managing meta data in a secure manner, the system comprising: 

a computing device capable of communicating with other 
communication devices through a communications network, the 
computing device including, a plurality of applications 
selectably executable on the computing device (Fig. 1 and 2), 

a security architecture for selectively providing security- 
based services to at least one of the plurality of applications 
(i.e. For additional security purposes, the values in data store 
206 could be stored in encrypted form in a protected area in 
client computer) (Ken nedy et al . col. 7, lines 45-47) , 

a data repository module, provided as an add- in module to 
the security architecture, for collecting meta data resulting 
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from use of the computing device (i.e. storing into a profile 
data values entered on a form on the basis of labels associated 
with fields on the form) ( Kennedy et al . col. 3, lines 1-5), 

the meta data including application data usable in an 
application and context data for identifying context in which 
the application data are used (i.e. the profile, which is stored 
for future use) (see abstract) , 

the statistical information indicating relationships 
between the meta data, storing the meta data and the statistical 
information in a storage of the computing device (i.e. the 
profile, which is stored for future use) (see abstract) , and 

retrieving, from the storage (i.e. a previously stored data 
value is retrieved from the user profile) (col. 11, lines 10-13), 
application data that would be most appropriate for a current 
context of using the application based on the context data (fig. 
5) and the statistical information (col. 5, lines 30-34). 

Kennedy et al . does not teach determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

Kawasaki teaches determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data (i.e. collecting 
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representative data sets of major areas of interests and 
processing the data sets by algorithms and weighted rules to 
form a recognizer) (col. 3, lines 4-16). 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein the determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Kawasaki because 
providing the determining statistical information associated 
with the meta data, the statistical information indicating 
relationships between the meta data allows reduced inaccurate, 
misleading or obsolete preferences, which may causing a mismatch 
between actual User interests and the information captured in 
manual preferences systems as taught by Kawasaki (col. 2, lines 
35-45) . 



As to Claim 45, Kennedy et al . as modified teaches a 
system wherein the data repository module includes : 
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the storage for storing the meta data ( Kennedy et al . col . 
3 , lines 1-5) ; 

a first interface for managing a process of storing the 
meta data in the storage ( Kennedy et al . col. 3, lines 1-5); and 

a second interface for retrieving from the storage the most 
appropriate meta data for the current context ( Kennedy et al . 
Fig. 2-3 and col. 5, lines 43-53). 

As to Claim 46, Kennedy et al . as modified teaches a 
system wherein 

the second interface formulates search requirements based 
on the current context of using the application, and executes a 
search based on the search requirements to retrieve the most 
appropriate metadata (fig. 5 and col. 5, lines 30-34). 

retrieving, from the storage (i.e. a previously stored data 
value is retrieved from the user profile) (col. 11, lines 
10-13), application data that would be most appropriate for a 
current context of using the application based on the context 
data ( Kennedy et al . Fig. 6-7 and col. 8, lines 36-45) and the 
statistical information ( Kennedy et al . col . 5, lines 30-34) and 



As to Claim 47, the teachings of Kennedy et al^ as modified 
has been discussed above, Kennedy et al . as modified does not 
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teach the search requirements specify weighted properties of the 
current context of using the application. 

Kawasaki teaches the search requirements specify weighted 
properties of the current context of using the application (i.e. 
collecting representative data sets of major areas of interests 
and processing the data sets by algorithms and weighted rules to 
form a recognizer) ( Kawasaki col. 3, lines 4-16) 

As to Claim 48, Kennedy et al . as modified teaches a 
system wherein 

the context data include at least one of the following: 
user roles, uniform resource identifiers (URIs) , file names, or 
form names pertaining to the met a data ( Kennedy et al . Fig. 2-3 
and col. 5, lines 43-53). 

As to Claim 49, Kennedy et al . as modified teaches a 
system wherein the metadata are stored in (key, value) pairs 

(i.e. the values can be correlated or combined with data from 
other sources, such as values used by the profile assistant) 

( Kennedy et al . col. 7, lines 50-55). 



As to Claim 51, Kennedy et al . as modified teaches a 
system wherein 
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the meta data represent at least one of the following: web 
page settings, file display settings, user ID/password 
combinations, computer form data, user's preferences, book 
marks, and authentication data (i.e. passwords) ( Kennedy et al . 
Fig. 6 and col. 8, lines 36-45). 

As to Claim 52, Kennedy et al . as modified teaches a 
system wherein the authentication data include at least one of 
the following : 

certificates, or public keys (i.e. For additional security 
purposes, the values in data store 206 could be stored in 
encrypted form in a protected area in client computer) ( Kennedy 
et al. col. 7, lines 47-50). 

As to Claim 53, Kennedy et al . as modified teaches a 
system wherein the current context includes at least one of the 
following: 

opening a web page, filling in a computer form, filling in 
a password- changing form, providing a certificate, opening a 
computer file, processing a computer file, or executing an 
application program ( Kennedy et al . Fig. 6 and col. 8, lines 
36-45) . 
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As to Claim 54, Kennedy et al . as modified teaches a 
system further comprising: 

a meta data editor for providing a graphical user 
interface (GUI) that allows the user to organize the stored meta 
data ( Kennedy et al . Fig. 6 and col. 8, lines 36-45). 

As to Claim 55, Kennedy et al . as modified teaches a 
system wherein 

the GUI is a graphical tool in a cylindrical configuration 
( Kennedy et al . Fig. 6) . 

4. Claims 8, 19-21, 29, 41-43 and 50, are rejected under 35 
U.S.C. 103(a) as being unpatentable over Kennedy et al . (U.S. 
Patent 6,651,217) in view of Kawasaki (U.S. Patent 6,539,375) 
further in view of Olden (U.S. Patent 6,460,141) . 

As to Claim 8, the teachings of Kennedy et al . as modified 
has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed by a 
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CDSA add-on module (i.e. Resource Based Authentication Security 
services through GSSAPI and CDSA Encrypted SSO Java graphical 
user interface for Web security system LDAP integration) (col. 
32, lines 23-25) . 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein the implementation is a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Olden because 
providing implements a Common Data Security Architecture (CDSA) , 
and the retrieving step is performed by a CDSA add-on module 
allows an improved security and access control system as taught 
by Olden (col. 2, lines 8-12). 

As to Claim 19, the teachings of Kennedy et al . as modified 
has been disclosed above, 

Kennedy et al . as modified does not teach presenting the 
password in the form in an obfuscated format; determining 
whether it is safe to present the actual password to a user; and 
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presenting the actual password in a non-obfuscated format when 
it is determined to be safe to present the actual password. 

Olden teaches presenting the password in the form in an 
obfuscated format (Fig. 9 and 12 and col. 14, lines 22-28); 

determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22-28); and 

presenting the actual password in a non-obfuscated format 
when it is determined to be safe to present the actual password. 
Olden teaches implements a presenting the password in the form 
in an obfuscated format ( Olden Fig. 9 and 12 and col. 14, lines 
22-28) ; 

determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22-28); and 

presenting the actual password in a non-obfuscated format 
when it is determined to be safe to present the actual password. 
( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein presenting the password in 
the form in an obfuscated format; determining whether it is safe 
to present the actual password to a user; and presenting the 
actual password in a non-obfuscated format when it is determined 
to be safe to present the actual password allows an improved 
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security and access control system as taught by Olden (col. 2, 
lines 8-12) . 

As to Claim 20, Kennedy et al . as modified teaches a 
method wherein 

the step of determining whether it is safe to present the 
actual password is performed based on input from the user ( Olden 
Fig. 9 and 12 and col. 14, lines 22-28). 

As to Claim 21, Kennedy et al . as modified teaches a 
method further comprising the step of: 

replacing the password stored in the storage with a new 
password if the new password has been accepted by a receiving 
party ( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

As to Claim 29, the teachings of Kennedy et al . as modified 
has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed by a 
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CDSA add-on module (i.e. Resource Based Authentication Security 
services through GSSAPI and CDSA Encrypted SSO Java graphical 
user interface for Web security system LDAP integration) (col. 
32, lines 23-25) . 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein the implementation is a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al. by the teaching of Olden because 
providing implements a Common Data Security Architecture (CDSA) , 
and the retrieving step is performed by a CDSA add-on module 
allows an improved security and access control system as taught 
by Olden (col. 2, lines 8-12). 

As to Claim 41, the teachings of Kennedy et al . as modified 
has been disclosed above, 

Kennedy et al . as modified does not teach presenting the 
password in the form in an obfuscated format; determining 
whether it is safe to present the actual password to a user; and 
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presenting the actual password in a non-obfuscated format when 
it is determined to be safe to present the actual password. 

Olden teaches presenting the password in the form in an 
obfuscated format (Fig. 9 and 12 and col. 14, lines 22-28); 

determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22-28); and 

presenting the actual password in a non-obfuscated format 
when it is determined to be safe to present the actual password. 
Olden teaches implements a presenting the password in the form 
in an obfuscated format ( Olden Fig. 9 and 12 and col. 14, lines 
22-28) ; 

determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22-28); and 

presenting the actual password in a non-obfuscated format 
when it is determined to be safe to present the actual password. 
( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein presenting the password in 
the form in an obfuscated format; determining whether it is safe 
to present the actual password to a user; and presenting the 
actual password in a non-obfuscated format when it is determined 
to be safe to present the actual password allows an improved 
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security and access control system as taught by Olden (col. 2, 
lines 8-12) . 

As to Claim 42, Kennedy et al . as modified teaches a 
computer program product wherein 

the computer executable instructions for determining 
whether it is safe to present the actual password is executed 
based on input from the user ( Olden Fig. 9 and 12 and col. 14, 
lines 22-28) . 

As to Claim 43, Kennedy et al . as modified teaches a 
computer program product further comprising: 

replacing the password stored in the storage with a new 
password if the new password has been accepted by a receiving 
party ( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

As to Claim 50, the teachings of Kennedy et al . as modified 
has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed by a 
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CDSA add-on module (i.e. Resource Based Authentication Security 
services through GSSAPI and CDSA Encrypted SSO Java graphical 
user interface for Web security system LDAP integration) (col. 
32, lines 23-25) . 

Therefore, it would have been obvious to a person having 
ordinary skill in the art at the time the invention was made to 
have modified Kennedy et al . wherein the implementation is a 
Common Data Security Architecture (CDSA) , and the retrieving 
step is performed by a CDSA add-on module. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Olden because 
providing implements a Common Data Security Architecture (CDSA) , 
and the retrieving step is performed by a CDSA add-on module 
allows an improved security and access control system as taught 
by Olden (col. 2, lines 8-12). 

Prior Art Made of Record 

5. The prior art made of record and not relied upon is 
considered pertinent to applicants disclosure. 

Burge et al . (U.S. Patent No. 6,014,638); 

Tumblin et al . (U.S. Patent No. 6,490,679); and 

Halabieh (U.S. Patent No. 6,564,170); 
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Conclusion 



6. Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Yicun Wu 
whose telephone number is 703-305-4889. The examiner can 
normally be reached on 8:00 am to 4:30 pm, Monday -Friday. 
If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Dov Popovici can be reached on 703- 
305-3830. The fax phone numbers for the organization where this 
application or proceeding is assigned are 703-872-9306 for 
regular communications and 703-746-7240 for After Final 
communications . 

Any inquiry of a general nature or relating to the status 
of this application or proceeding should be directed to the 
receptionist whose telephone number is 703-305-3900. 



Yicun Wu 
Patent Examiner 
Technology Center 2100 
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